CVE-2021-21186

—

CVSS 3.1

4.3 medium

EPSS

1%p64

Published

Mar 9, 2021 (Mar 9, 2021)

Modified

Jun 17, 2026

Description

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.

Vendors: google fedoraproject debian
Products: chrome, fedora, debian linux
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.